> /ip address add address=192.168.0.1/28 interface=LAN IP address untuk akses ke jalur DSL : > /ip address add address=10.32.57.253/29 interface=DSL IP address untuk akses ke jalur Wireless : > /ip address add address=10.9.8.2/29 interface=WIRELESS
> /ip route add gateway=10.32.57.254,10.9.8.1,10.9.8.1
> /ip firewall mangle add chain=prerouting src-address=192.168.0.0/28 action=mark-routing new-routing-mark=SUBNET1-RM > /ip route add gateway=10.9.8.1 routing-mark=SUBNET1-RM check-gateway=ping > /ip route add gateway=10.32.57.254
> /ip firewall mangle add chain=forward src-address=192.168.169.0/28 action=mark-connection new-connection-mark=NET1-CM > /ip firewall mangle add connection-mark=NET1-CM action=mark-packet new-packet-mark=NET1-PM chain=forward > /queue type add name=downsteam-pcq kind=pcq pcq-classifier=dst-address > /queue type add name=upstream-pcq kind=pcq pcq-classifier=src-address > /queue tree add parent=LAN queue=DOWNSTREAM packet-mark=NET1-PM > /queue tree add parent=INTERNET queue=UPSTREAM packet-mark=NET1-PM
> ip firewall mangle add chain=prerouting src-address=10.10.10.0/28 protocol=icmp action=mark-connection new-connection-mark=ICMP-CM passthrough=yes > ip firewall mangle add chain=prerouting connection-mark=ICMP-CM action=mark-packet new-packet-mark=ICMP-PM passthrough=yes > ip firewall mangle add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay Memanipulasi Type of Service untuk DNS Resolving : > ip firewall mangle add chain=prerouting src-address=10.10.10.0/28 protocol=tcp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes > ip firewall mangle add chain=prerouting src-address=10.10.10.0/28 protocol=udp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes > ip firewall mangle add chain=prerouting connection-mark=DNS-CM action=mark-packet new-packet-mark=DNS-PM passthrough=yes > ip firewall mangle add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay
> queue type add name=”PFIFO-64″ kind=pfifo pfifo-limit=64 Mengalokasikan Bandwidth untuk ICMP Packet : > queue tree add name=ICMP parent=INTERNET packet-mark=ICMP-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64 Mengalokasikan Bandwidth untuk DNS Resolving : > queue tree add name=DNS parent=INTERNET packet-mark=DNS-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64
[admin@instaler] > in pr # NAME TYPE RX-RATE TX-RATE MTU 0 R public ether 0 0 1500 1 R wifi1 wlan 0 0 1500 2 R wifi2 wlan 0 0 1500 3 R wifi3 wlan 0 0 1500 And this is the IP Addresses for each interface:
[admin@instaler] > ip ad pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 10.20.1.0/24 10.20.1.0 10.20.1.255 public 1 10.10.2.0/24 10.10.2.0 10.10.2.255 wifi1 2 10.10.3.0/24 10.10.3.0 10.10.3.255 wifi2 3 10.10.4.0/24 10.10.4.0 10.10.4.255 wifi3 On the public you can add NAT or proxy if you want.
[admin@instaler] ip firewall mangle> print Flags: X - disabled, I - invalid, D - dynamic disabled=no 0 chain=forward dst-address=10.10.2.36 action=mark-connection new-connection-mark=users-userU passthrough=yes comment=”” disabled=no 1 chain=forward dst-address=10.10.2.36 action=mark-connection new-connection-mark=users-userD passthrough=yes comment=”” disabled=no 2 chain=forward connection-mark=users-userU action=mark-packet new-packet-mark=userU passthrough=yes comment=”” disabled=no 3 chain=forward connection-mark=users-userD action=mark-packet new-packet-mark=userD passthrough=yes comment=”” disabled=no 98 chain=forward src-address=10.10.0.0/16 dst-address=10.10.0.0/16 action=mark-connection new-connection-mark=users-lokal passthrough=yes 99 chain=forward connection-mark=users-lokal action=mark-packet new-packet-mark=lokalTrafic passthrough=yes
[admin@instaler] > queue tree pr Flags: X - disabled, I - invalid 0 name=”Download” parent=global-out packet-mark=”” limit-at=0 queue=pcq-download priority=1 max-limit=2000000 burst-limit=0 burst-threshold=0 burst-time=0s 1 name=”Upload” parent=WGW packet-mark=”” limit-at=0 queue=pcq-upload priority=1 max-limit=1000000 burst-limit=0 burst-threshold=0 burst-time=0s
2 name=”user10D” parent=Download packet-mark=userD limit-at=0 queue=pcq-download priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s 3 name=”user10U” parent=Upload packet-mark=userU limit-at=0 queue=pcq-upload priority=5 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
#!/bin/sh iptables=/sbin/iptables #definition default policy in here $iptables -F INPUT $iptables -F OUTPUT $iptables -P INPUT DROP $iptables -P OUTPUT DROP #remember for open policy outpu $iptables -F FORWARD $iptables -F -t nat $iptables -P FORWARD DROP #The default definition of policy and make a new chain named maccheck in interface eth1 $iptables -t mangle -F $iptables -t mangle -F maccheck $iptables -t mangle -X maccheck $iptables -t mangle -N maccheck $iptables -t mangle -I PREROUTING -i eth1 -p all -j maccheck #self explanatory… ip address + mac $iptables -t mangle -A maccheck -s 192.168.0.1 -i eth1 -m mac -j RETURN –mac-source 00:80:11:11:11:11 $iptables -t mangle -A maccheck -s 192.168.0.2 -i eth1 -m mac -j RETURN –mac-source 00:80:22:22:22:22 $iptables -t mangle -A maccheck -s 192.168.0.3 -i eth1 -m mac -j RETURN –mac-source 00:80:33:33:33:33
This time I will mengeshare how to load - balancing and Fail -over in this case exemplified MikroTik.Untuk ISP has 2 paths ...
Hotspots are certain places ( usually public ) who have internet service using Wireless LAN technology , such as the univers...
Easy Way to Make Hotspot With Mikrotik , This time I will share how to create a hotspot using a proxy . proxy is the operatin...
Indeed, Windows 8 is very rampant in the year 2013 because it may be better than windows 7 , tapilannya more elegant and sim...
This time I will discuss about how to use the free SSH using modem or card smartfren manually . go directly to the tut...
For those of you who still do not have a Gmail account ( Google Mail ), then How to Make This Blog will we begin to creat...
Payza.com officially released May 14, 2012 as the transformation of alertpay.com which has changed its name . Payza is a company...
How to setting Bitvise : 1. Download the software here 2. Follow the installation process to complete 3. After the installation is ...
Office application is very useful for our daily life . What's more , the office application can help us in solving a wide rang...
Download the software first Here 1. Open Proxifier software Click " profile " --- > Proxy Server 2. And then...
You already know how to create a free iCloud account and email ? If not , this post is specifically raise the issue . a little ex...